the moment the details are worked out, You'll have to visit the repository of that Root CA and down load (and confirm the hash) of that certificate just before downloading it. you ought to review the CP/CPS of the Root https://ca-none.com/